ISC2's CISSP

CISSP Course/Exam Objectives

• Chapter 1: Access Control
  • Control access by applying concepts/methodologies/ techniques
  • Understand access control attacks
  • Assess effectiveness of access controls
  • Identify and access provisioning lifecycle (e.g., provisioning, review, revocation)
• Chapter 2: Telecommunications and Network Security
  • Understand secure network architecture and design (e.g., IP & non-IP protocols, segmentation)
  • Securing network components
  • Establish secure communication channels (e.g., VPN, TLS/SSL, VLAN)
  • Understand network attacks (e.g., DDoS, spoofing)
• Chapter 3: Information Security Governance and Risk Management
  • Understand and align security function to goals, mission and objectives of the organization
  • Understand and apply security governance
  • Understand and apply concepts of confidentiality, integrity and availability
  • Develop and implement security policy
  • Manage the information life cycle
  • Manage third-party governance
  • Understand and apply risk management concepts
  • Manage personnel security
  • Develop and manage security education, training and awareness
  • Manage the Security Function
• Chapter 4: Software Development Security
  • Understand and apply security in the Software Development Life Cycle
  • Understand the environment and security controls
  • Assess the effectiveness of software security
• Chapter 5: Cryptography
  • Understand the application and use of cryptography
  • Understand the cryptographic life cycle
  • Understand encryption concepts
  • Understand key management processes
  • Understand digital signatures
  • Understand non-repudiation
  • Understand methods of cryptanalytic attacks
  • Use cryptography to maintain network security
  • Use cryptography to maintain application security
  • Understand Public Key Infrastructure (PKI)
  • Understand certificate related issues
  • Understand information hiding alternatives
• Chapter 6: Security Architecture and Design
  • Understand the fundamental concepts of security models
  • Understand the components of information systems security evaluation models
  • Understand security capabilities of information systems
  • Understand the vulnerabilities of security architectures
  • Understand software and system vulnerabilities and threats
  • Understand countermeasure principles (e.g., defense in depth)
• Chapter 7: Operations Security
  • Understand security operations concepts
  • Employ resource protection
  • Manage incident response
  • Implement preventative measures against attacks
  • Implement and support patch and vulnerability management
  • Understand change and configuration management
  • Understand system resilience and fault tolerance requirements
• Chapter 8: Business Continuity and Disaster Recovery Planning
  • Understand business continuity requirements
  • Conduct business impact analysis
  • Develop a recovery strategy
  • Understand disaster recovery process
  • Exercise, assess, and maintain the plan (e.g., version control, distribution)
• Chapter 9: Legal, Regulations, Investigations, and Compliance
  • Understand legal issues that pertain to information security internationally
  • Understand professional ethics
  • Understand and support investigations
  • Understand forensic procedures
  • Understand compliance requirements and procedures
  • Ensure security in contractual agreements and procurement processes
• Chapter 10: Physical (Environmental) Security
  • Understand site and facility design considerations
  • Support the implementation and operation of perimeter security
  • Support the implementation and operation of internal security
  • Support the implementation and operation of facilities security (e.g., technology convergence)
  • Support the protection and securing of equipment
  • Understand personnel privacy and safety (e.g., duress, travel, monitoring)

Career Prospects

An ISC2 certified professional has several career opportunities open up to them, including:

• Business Analyst
• Chief Security Officer
• Chief Technology Officer
• System and Network Designer

CISSP Exam FAQ's